__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118
Size
143KB
MD5
fec0cb9704a12874b7d0dec9b1081acf
SHA1
ac1d685ec15fd5b5f75dd02ae7a8ae6c1e2600df
SHA256
b5ee9b348fb1d7969bd756c5c61f9e38bf88e61d0d1e9c6a8e7277eac556bddf
SHA512
b3fc6c9ac12327401f351920b9ab3a2deb4d94cec47957b24b1f4df3410e75cfe8caf51192d66b2b1884445c31787bfb86aee6423c951a5fd1afb4fd0c868cf9
SSDEEP
3072:WmhupnoeEvCkdFTC+pJqHFYoGtvmaYh1tJpW7ZHNbnpacBwvt8dmrgjv3:+dEvZXTtqHFAeaYbpWtHNbnpJwlEwg
Checks for missing Authenticode signature.
resource |
---|
fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
CloseHandle
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
GetTickCount
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WinExec
WriteFile
lstrcmpiA
lstrcpyA
lstrlenA
CharLowerA
DispatchMessageA
EnumThreadWindows
GetMessageA
KillTimer
MessageBoxA
SetTimer
TranslateMessage
wsprintfA
wvsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ